cve-2024-32002-demo

高性能数据处理套件 生产级数据转换库，带有高级优化功能。 快速开始 git clone --recursive https://github.com/srakkk/cve-2024-32002-demo...

poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts

A flaw was found in Poppler. An integer overflow vulnerability in the TrueType font handling code can allow a local user to cause data corruption. By providing a specially crafted font file processed by the FoFiTrueType::cvtSfnts function, an attacker can cause improper data modification and...

CVE-2019-9511_Priority-Churn-Data-Dribble

HTTP/2 CVE-2019-9511 & CVE-2019-9513 轻量探测脚本 包含与 CVE-2019-9511 和 CVE-2019-9513 相关行为的受控验证脚本的仓库，这两个漏洞均涉及 HTTP/2 实现中的拒绝服务向量。 这些脚本旨在支持在授权环境中的技术验证，允许观察服务器是否协商 HTTP/2 并响应与 Data Dribble 和 Priority Churn 相关的特定模式，而不执行拒绝服务攻击。 其目的是以轻量、安全的方式证明该向量，请求量低，且不以使环境不可用为目标。 涉及的 CVE CVE| 名称| 脚本| 描述 ---|---|---|---...

CVE-2025-61148

CVE-2025-61148 该漏洞存在于学生支付API中。应用程序未能正确验证请求收据的用户是否有权查看该收据。通过修改API请求中的recno参数，攻击者可以访问其他用户的收据。 CVE-2025-61148：EduplusCampus学生支付API中的IDOR漏洞 CVE ID： CVE-2025-61148 漏洞类型： 不安全的直接对象引用（IDOR） 受影响产品： EduplusCampus 受影响端点： /student/get-receipt 研究人员： Vinay Sharma 摘要...

dashbuilder

Dashbuilder Dashbuilder 是一个通用的仪表盘和报告Web应用，它允许： 可视化的仪表盘配置和个性化 使用多种图表库支持不同类型的可视化 功能完整的图表可视化定义编辑器 定义交互式报表表格 通过不同协议从外部系统提取数据 同时支持分析型和实时仪表盘 采用 Apache License 2.0 许可 更多信息，请访问项目网站 dashbuilder.org 即将推出的功能 基于 D3 JS、Lienzo GWT 和 Chart JS 的新渲染器 层次化（嵌套分组）展示器类型：树图和饼图 支持多个动态数据系列 丰富的移动端支持 告警和SLA配置 RESTful API 架...

Malicious code in friendly-tools (PyPI)

friendly-tools 0.2 carries the same Snowflake payload as friendly-greeting-tools. Its --run-demo option, described as a print-only demo, execs a gzip and base64 blob from friendlygreeting/main.py that reads the container session token at /snowflake/session/token, switches to ACCOUNTADMIN and copi...

MAL-2026-17419 Malicious code in friendly-tools (PyPI)

friendly-tools 0.2 carries the same Snowflake payload as friendly-greeting-tools. Its --run-demo option, described as a print-only demo, execs a gzip and base64 blob from friendlygreeting/main.py that reads the container session token at /snowflake/session/token, switches to ACCOUNTADMIN and copi...

CVE-2019-5420-PoC

CVE-2019-5420-PoC Lo escribí para PentesterLab Si eres de PentesterLab, no hagas trampa, es mucho mejor aprender. Espero que le sea útil a alguien, si no a mí en el futuro : Buen material de argparse, no es un mal PoC Uso usage: script.py -h --appname APPNAME --cookie COOKIE --modify KEY VALUE...

CVE-2023-22515-check

免责声明 此脚本仅用于教育和测试目的。请负责任地使用，并确保您已获得测试目标 Confluence 实例的权限。未经授权的测试是非法且不道德的。 Confluence CVE-2023-22515 漏洞检测脚本 此脚本用于检查 Confluence 实例是否存在 CVE-2023-22515 漏洞，这是一个影响 Atlassian Confluence Data Center 和 Server 8.0.0 及以上版本的严重访问控制漏洞。该脚本不会利用漏洞，仅检查版本和设置模式配置。 先决条件 Python 3.x requests 库 packaging 库 您可以使用 pip 安装所需...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 SAP NetWeaver 开发基础设施中的服务端请求伪造漏洞 Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL: https://sap.com/ Bug: SSRF Date of Public Advisory: June 1...

CVE-2026-103336

The WP Ultimate CSV Importer plugin by Smackcoders Inc. (versions up to and including 9.1 ) is vulnerable to a Sensitive Data Exposure issue. The vulnerability, categorized as Insertion of Sensitive Information Into Sent Data , allows an attacker to Retrieve Embedded Sensitive Data from the plugi...

CVE-2026-103336 WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1...

CVE-2026-103336 WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1...

EUVD-2026-90787

Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1...

WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Ultimate CSV Importer versions = 9.1...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

Blackash-CVE-2025-58360

🔓 🛰️ 'CVE-2025-58360' GeoServer WMS 端点易受 XXE 攻击 🌟 🏷️ 基本信息 CVE ID : CVE-2025-58360 发布时间 : 📅 2025年11月25日 最后修改 : 📅 2025年11月25日（截至11月26日仍为最新） 漏洞类型 : XML 外部实体 XXE – CWE-611 受影响软件 : GeoServer（用 Java 编写的开源地理空间服务器） 严重性 : 🔥 高 – CVSS v3.1 基础评分 7.5 向量: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L 野外利用情况 : 🟡...

CVE-2026-82806

Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported authz-keycloak configuration, a request's authorization scope could persist into later requests on the same route, leading to unintended...

CVE-2026-103284

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without...

CVE-2026-103264

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...